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In this paper, for the decoy state method using a finite number of decoy light 
intensities, we present an improved upper and lower bounds for the asymptotic yield 
y n for n-photon states. In particular if all the light intensities are less than or equal 
to one, they are not only a lower or upper bound, but in fact are the exact minimum 
or maximum. 

I. INTRODUCTION 

The decoy state method is a technique used in quantum key distribution (QKD) for 
determining the possible range of the yield m and the error rate e\, by a statistical test 
using several different light intensities Here the yield y n is the probability that 

an n-photon state emitted by Alice is detected in Bob's apparatus, and e n the error rate 
caused solely by the n-photon states. In this method, Alice first chooses the average photon 
number of each of her coherent light pulses randomly out of fix, . . . ,fiM, and Bob records 
every detection events. After quantum communications are completed, Alice reveals the 
average photon number of each pulse over an authenticated public channel. Then referring 
to these data, Bob calculates the detection rates corresponding to each /ij, and estimates 
a lower bound or the minimum of y\ that is consistent with them. Similarly, he can also 
estimate an upper bound or the maximum of e\. 

These values are then used to calculate the key generation rate R by plugging them 
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papers (see, e.g., 
is due to Hayashi 



into well-known formulae, e.g., R = Q(p)f( y E(p))H 2 (E( y p)) + Qo(p) + Qi(p)[l — H 2 (ei)] 
for the BB84 protocol [4]. Here Q(p) is the overall detection rate in Bob's detector, and 
Qo(p), Qi(p) are the contributions to it from the pulses containing zero and one photon 
respectively. E(p) is the overall error rate, and H 2 (e) the binary entropy function H 2 (e) = 
— elog 2 e — (1 — e) log 2 (l — e), hence H 2 (E(p)) corresponds to the length of a syndrome 
consumed to correct bit errors. The factor f(E(p)) is inserted to take into account the 
information rate of practical error correcting codes which is usually below the Shannon 
limit. 

Lower bounds on m with a finite number of decoy intensities have been discussed in many 

iffnn 

!, |5|, |6|, |7j and references therein), and the best and the most general one 
3]. Adding to these results, in this paper we present an improved upper 
and lower bounds X n , Z n for the asymptotic yield y n . In particular if all the light intensities 
Hi are less than or equal to one, X n , Z n are not only a lower or an upper bound, but in fact 
are the exact minimum or the maximum. 

The main difference between preceding approaches and ours is as follows. The original 
decoy problem is an optimization problem involving an infinite number of variables y n . In 
order to reduce the number of variables to finite, Wang devised a decomposition of a phase- 
randomized coherent state [2] , which was later generalized to the case of an arbitrary number 
of decoy light intensities by Hayashi [i]]; What they did was to decompose the state p sent 
by Alice as a sum p = ^2^=1 a nPn of mixed states p n . Then by regarding a n as independent 
variables and using a linear-programming-like approach |8], Hayashi presented a general 
algorithm for obtaining the minimum of j/i, which is linear in a n . At first this method may 
seem general enough and capable of giving the exact minimum of y n . So what needs to be 
improved further? The answer is that a n cannot be considered as independent in reality 
since p n are not completely distinguishable to each other. Thus by regarding that way they 
give Eve more power than she actually has, and there is no guarantee that the obtained 
minimum is also that of the original problem involving an infinite number of y n . 

In contrast, in this paper we present a method for finding the minimum of y\ without 
reducing the variable concerned, i.e., we treat all y ra 's independently as in the original decoy 
method problem. The key observation here is that when regarding variables y n as an infinite- 
dimensional vector y, the difference Eve can make to y without being noticed by Alice or 
Bob can be expanded by a set of basis vectors w^ m \ each of which is written in a simple 
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form with the Schur polynomials. 

What is remarkable about our result is that the configuration of y n leading to the smallest 
yi varies depending on whether the number M of decoy light intensities (including the signal) 
is even or odd. The analysis is especially simple for M even and Hi < 1; Because of the 
positivity of the Schur polynomials, it is readily seen that y\ is minimized when y n = 
for n > M and that the problem is automatically reduced to that involving only a finite 
number of variables; yi, ■ ■ ■ ,yM- Thus by simply inverting a matrix, the minimum of y± is 
expressed in an explicit and simple form. On the other hand for M odd, the analysis turns 
out to be somewhat more complicated, however, we can still specify the configuration that 
corresponds to the smallest y% and write down an explicit algorithm for finding it out within 
a finite number of steps. 

The paper is organized as follows. In Section [III we define our problem of the decoy 
state method and present our main result. Section II I II analyzes configuration X n which is 
in particular useful in determining the minimum of y\ when an even number M of decoy 
light intensities are used. Subsequently in Section [TV] we discuss the properties of Z n which 
is useful for M odd. Finally we conclude in Section IVl 



Throughout the paper, for the sake of simplicity, we consider the case where y is already 
known precisely by using vacuum decoy states, and we discuss the minimum and maximum 
of y\ under the condition that 



is satisfied for i — 1, . . . , M. Note, however, our analysis in the subsequent sections is equally 
valid even without vacuum decoy states. appearing in (CQ) denotes the contribution 

from non-zero photon number state to the detection rate in Bob's detector, i.e., := 
Q{jj) — e~^yo. Being a probability, each y n is of course constrained as 



II. SETUPS AND STATEMENT OF THE MAIN RESULT 



A. Decoy method 




(1) 



n=l 



< y n < 1 for all n > 1. 



(2) 
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The explicit form of the detection rate Q+{fi) depends on the physical model that one 
employs for describing the quantum channel. In this paper, we assume that in the absence 
of Eve, the yield takes the value y n = q n with 



q n := Ar] n + B, 

Vn := i-(i-7?y\ 



(3) 



and that each parameters are conditioned as 



< A < 1, 0<B<r]< 1/10. 



(4) 



Here i] is the channel transmission rate including the quantum efficiency of Bob's detector, 
and B is roughly the dark count rate Pdark- Note that for practical QKD systems, (jl]) is 
not really a restriction; 7] is already around 0.1 at 0km due to the detector efficiency On 
the other hand for sufficiently small r/, we have B < ^Q(fii)E([ii) ~ |r//iji?(/ij) < \r\\Xi. 
Thus with the signal light intensity (say fii) normally being around 0.5 or less, B < rj is 
automatically satisfied. 

According to Lo et al. and Hayashi jj], these are A — 1, B — Pdark, from which we 
have 

Q{Hi) = 1 - exp(-?7/ij) +Pdark, 

whereas in some other references (e.g., |4(), slightly different models such as A = 1 — Pdark 
and B = Pdark are used [lj| • 

The decoy state method is similarly effective in lower bounding the error rate e\ from 
pulses containing a single photon; By recording the overall error rate E(/j,i) for each decoy 
light intensity /ij and using the relation 



Q{Hi)E{ni 



-e ~^y = e ' 



?1=1 

with b n := y n e n , one can determine the range of bi = y^e 
with ([3]) by redefining parameters A, B. For instance in 
side of Eq. ([5]) takes the form 



^ n\ 



(5) 



This case can also be treated 
the value on the left hand 



9, 



Q{m)E{m) = e det (1 - exp(-77/ij)) + -p dSLlk , 



which corresponds to A = edct, B = ^dark/2. A slightly different error models are also used, 
e.g., in [4|. In what follows we do not distinguish between all these cases, whether of yields 
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or of error rates, and analyze them on an equal footing as an optimization problem regarding 
Eq. (j3J) with given values of A, B satisfying (j3J. 



B. Main result 



Under these settings, we present upper and lower bounds on y n in terms of quantities X n 
and Z n ; for any M and n < M, 

X n < y n < Z n if M — n is odd, (6) 
Z n < Vn < X n if M — n is even, (7) 

where X n are expressed in a simple form (see Eq. (fTOl) ). For instance, X% takes the form 

X x = V ex P(^)^+(^) Y[ ^ (8) 
i=i /,; j=i jfr f ' J ~ 11 ' 

On the other hand Z n cannot be written in a simple form as X n , however, as we shall 

demonstrate in Section IIVI they can always be obtained by a numerical calculation within 

a finite number of steps. 

In addition, it can be shown that at least when < 1, Eve can actually attain y n = X n 
and y n = Z n in (jBJ) and (jTJ). Hence they are not only a lower (resp. upper) bound, but in 
fact are the minimum (resp. maximum) of y\. 

In order to demonstrate how effective our approach is, take a typical set of experimen- 
tal parameters, e.g., A — 1, 77 = 10 -2 , B = pdark = 1CT 5 , M — 3, and (1^1,112,^3) = 
(0.07,0.2,0.5). It turns out that Z x = 0.993 x 10~ 2 < y x < 1.003 x 10~ 2 = X u where the 
yield in the absense of Eve is yi — qx — 1.001 x 10~ 2 . Hence by using only four decoy light 
intensities including vacuum, we can determine y\ within accuracy of less than one percent. 



III. MINIMUM OF yi FOR M EVEN 

First in this section, we discuss the property of X n as lower or upper bounds as stated 
in Sec. Ill Bl This is in particular useful in determining the minimum of y± when there are 
an even number of constraints, that is, for M even. 

For M = 2 Hwan g Q pointed out that Eve, b e S t attae, st.ategv is to set y. = to, 
all n > 3, and hence the problem is reduced to solving an linear equation of y±, y 2 . Here 
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we shall show that this can in fact be generalized to any even value of M, i.e., in order to 
obtain the minimum yi, it suffices to set y n = for all n > M and calculate yi compatible 
with 



Hi Hi • • • Hi 



M 



\ 



jl 2 H 2 



( 



n // 2 ,, M 

V Mm Mm " " Mm I 



/l! \ / exp^OQ+^x) ^ 



in 
2/2/2 



V 



/ 



exp(^ 2 )Q+(/i2) 



^exp(/! M )Q + (/i M ) j 



(9) 



Vm/M\ 

by inverting the Vandermonde matrix. For the rest of the paper, we denote the solution y n 
to Eq. (J9j) as X n . For n > M, we set X n = formally for later convenience. 



Theorem 1 



For M even, X\ is a lower bound of y± which is consistent with Eq. (Q]j. 

More generally, for any M and any n < M, X n is a lower (resp. upper) bound of y n 
if M — n is an odd (resp. even) number. 

If fa, . . . ,hm — 1; we have < X n < 1 for all n. That is, Eve can actually achieve 
y n = X n . Hence X n is not only a lower (resp. upper) bound, but is also the minimum 
(resp. maximum) of y n for M — n odd (resp. even). 



The proof will be given in Section IIIIBI Using Cramer's rule, the solution X n to Eq. (J9]) 
can be expressed explicitly as 



X„ 



11 
n\ 



Hi ■■■ Hi 1 exp{Hi)Q+{Hi) •■• /if 



Mm ■•• Mm 1 exp(/i M )Q + (/i M ) nlf 1 ■•• Mm 



/D(hi, ■ ■ • ,Mm), 



/m \ 

D(hi, Hm) ■= I II Mi I a (Mi, • • • > Mm) 



with A(/ii, . . . , hm) being the Vandermonde determinant 



A(hi, • • • ,Hm) 



M-l 



1 ••• Hi 



1 ■•■Mr 1 



(10) 



(11) 



(12) 



In particular, Xi takes the form of Eq. (jSj) 
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A. Mathematical preliminary 



As a preliminary to the proof of Theorem [TJ we define the Schur polynomials s\ (see, 



e.g., Ref. |sllld|) and difference vectors 



w 



M 



Definition 1 Choose an integer partition A = (Ai, . . . , A&) satisfying Ai > A2 > • • • > A& > 
; and k < M. For n > k, set A n = formally. The Schur polynomial s\ in variables 
fix, . . . , f/,M is defined as 



sx(ni, ■ ■ ■ ,Hm) ■'- 



..Am 1+Am_i M-l+Ai 
Pi Pi Pi 



, ,A M ,1+Am-i 
P2 P2 



.A M 1+Am-i 
PM rif 



, M-l+Ai 
P2 



M-l+Ai 
r'M 



I A(ji u . . . ,pm), 



where A(/i 1; . . . is the Vandermonde determinant defined in Eq. (TTDj). 

For example, if the partition A is empty, i.e., Ai = A2 = • • • = 0, both the numerator and the 
denominator equal A(/xi, . . . , an d we have 3$ = 1. For A = (1, 1, . . . , 1) with 1 repeating 
M times S(i t x,...,i) = Yli=x ^i- m what follows, we denote integer partitions with greek letters 
A, a, . . . with the only exception of fi that is used for average photon numbers. 

Now using s\ thus defined, we consider difference vectors Ay = (Ay±,Ay2, . . .) to y = 
(yi, y2, ■ ■ •) which preserve the constraint ([IT) . In other words Ay are those vectors satisfying 



' n! 



n=l 







(13) 



for all 1 < i < M. Hence if y is a solution to (JT]), y + Ay = (yi + Ayi,y 2 + Ay 2) . . .) is 
also a solution when disregarding the constraints < y n < 1. The set of vectors W := 
{Ay sa tisfy ing; Eq. ffTB"]) } clearly forms a subspace of the vector space V consisting of all 



vectors 



12| . For our present purposes, it is convenient to choose the following non-orthogonal 



basis for W. 

Definition 2 We define a set of vectors = (w^' ,w%, . . .) labeled by m > M as 

Pm) for n < M, 



w 



(m) 



1 \M-n+l H - /,, 
v 



ml 



1 




for n = m, 
otherwise, 



(14) 



where a denotes an integer partition a(a, b) := (a, 1, 1, . . . , 1) with 1 's repeating b times. 
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Lemma 1 Vectors form a linear basis ofW. That is, are solutions to Eq. ( fI3j) . 
and conversely, any solution to Eq. (T3\) can be uniquely expressed as a superposition of 
as 

oo 

Ay = A y m w {m) . (15) 

m=M+l 

The proof is given in Appendix [B] With the help of this lemma, we see that given any 
solution y = (y±, y 2 , . . .) to Eq. (DO), X — y is written uniquely as a superposition of w^ m ' as 

oo oo 

Vn -X n = Y, W i n l \y m -X m )= ^y™- ( 16 ) 

m=M+l m=M+l 

We will use this relation repeatedly in the following sections. 



B. Proof of Theorem 1 



In this subsection we will prove Theorem 1, but before going into details, let us give 
an intuitive explanation. Eve's goal is to minimize y\ while keeping the measured value of 
Q + (Hi) intact so that her attack will not be noticed by Alice and Bob. Hence the difference 
Ay she makes to the yield y must satisfy ( fl3l) , and as we have seen in Lemma h can 
always be considered as a sum of the basis vector w^ m '. Now note that the Schur polynomial 
s a (a,b) being always positive in Eq. (TH1) . the element of u4 m ' ) alternates its signs with as 
n increases as n — 1, . . . , M and m. In pariticular if M is even, both and are 
positive for any m (see Fig. [1]). Thus we see that minimizing y n for n > M, or equivalently, 
taking Ay n < will always decrease y±. As a result, the best configuration for Eve turns 
out to be the one with y n = for all n > M, i.e., X n . 

Lemma 2 For M even, X% is a lower bound on y\ of Eq. (Qp. More generally, for any 
n < M , if M — n is odd (resp. even), X n is a lower (resp. upper) bound on y n . 

Proof: Since the proof is essentially the same for all cases, we consider here only the case 
of n = 1 and M being even. During the proof, we suppress the constraint < y n < 1 for 
n = 1, . . . , M and let them take an arbitrary value. For n > M we still require y n > 0. Then 
in fact X\ is the minimum of y\ under these requirements, and is also a lower bound under 
the full constraint (T5]). This can be seen by looking at the n = 1 element of Eq. ffT6]) ; Given 
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A 



w 



n = \ 




FIG. 1: Image of Wn for M even. The element changes signs as n increases from 1 to M and 
then to m. 

an arbitrary solution y — (yi, y^ . . .) to Eq. (pQ), the difference of its first element with X's 
takes the form 

oo 

v (m) 

vx-x x = W l Vm- 

771= M 

Obviously this is always greater than or equal to zero because y m > and w[ m ' > > for M 
even. Hence X\ is the minimum of y\ under the requirements that we introduced at the 
beginning. This completes the proof. 

From this proof we see that if all of Xi, . . . , Xm satisfy < X n < 1 for a particular choice 
of A and B, they are indeed the true minima (resp. maxima) under the full constraints (j2J). 
One can always verify this by numerical calculations, and doing so may be useful in practice. 
However, we can in fact verify it analytically for a sufficiently wide range of parameters. 

Lemma 3 For fi±, . . . , (jlm — 1? we have < X n < 1 for all n. 

Proof: Substituting y n = q n in Eq. (JIB]) and using Eq. (fH|) . we obtain 

= ^ + (17) 

n\ n\ 

oo 



In'- — ^S a ( m -M,M-n)(^l, ■ ■ ■ i ^m) 



ml 

m=M+l 



for n < M. According to the positivity of q n and the Schur polynomials s\, we have /„ > 0. 
From this it is immediate that y n > for M — n even, and y n < 1 for M — n odd. No that 
so far we did not use the condition < 1. 
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On the contrary, in order to see y n < 1 for M — n even and y n > for M — n odd, we 
need to bound I n from above using /ij < 1. By inequality (1A2I) and r/ n < m?, 
^ Amr] + B m _ n {m-n -1)1 



to! ™ 3 (M-n)!(TO-M- 1)! 

m=M+l \ J \ ) 



< 



OO 



E 



^7 + 5 .m-n (TO-n-1)! 



w Jto-I)!^ (M-n)!(TO-M-l)! 

^- n+1 (Ar, + B) ^ Ar, + B k Jlf-(M-n + l) , , 

M! ^ fc! (/c + M) • ■ ■ (k + M — n + 1)' K ' 



thus for fii < 1, 



^ A V + B ^ 1 _ e(A V + B) 



Ml ^ hi Ml 

k=0 



for all M and n < M. On the contrary, inequality ( 1181) for M = 2 and n — 1 in particular 
yields 



fc=0 



/ | 



1)! (A; + 2)! 



fc=0 

Ar? + 5. (20) 



Therefore, combining ( fl9l) and ( |20l) we obtain for M — n odd 



A?7 + . , 

4 < 777 7TT- (21) 



n ~ (M-l)l' 

Now by using ffl9|) for M — n even, orn = M, M — 2, . . . > 0, we have 



X n < g n + —(Ar, + B)<(l + m ) (Ar, + B) < (1 + e) (Ar, + S). 

The second inequality follows from r/ n < nr; and thus q n /nl < Arj + B. Then using condition 
@ we see 

X n < (1 + e)(A7? + 5) < (1 + e)2r/ < 1. 

for all even n < M. Similarly for M — n odd, or n — M — 1, M — 3, . . . > 0, by using fT2"T]) 
we find 

nT ^ nl " (iiTlj! " (M=T)T (gM - ~~ + ^)) • 
In the second inequality, we used the fact that q n /nl is monotinically decreasing in n. Since 

q M -i ~ (Ar] + B) = A(t} M -i ~v)>0 
for M > 2, we have finally X n > for M — n odd. This completes the proof. 
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IV. MINIMUM OF yi FOR M ODD 

For M odd as well, by using a similar argument as used in the previous section, the 
configuration y n giving the minimum value of y\ can be determined if /zi, . . . ,/xm < 1- In 
what follows we denote this configuration as Z = (Z\, Z2, . . .). Z includes a set of variables 
(L, a) that can be specified (as far as we know) only by numerical calculations, and cannot 
be written in a simple form as Eq. (jSJ). Still, as shown below, it can always be determined 
within a finite number of steps. 



A. Definition of Z 

In this subsection we define what the configuration Z looks like in two steps; First we 
give a configuration z involving parameters L, a and then define Z as its special case. 

Definition 3 For a given set of an integer L > M and a real number < a < 1, z(L, a) = 
(zi(L, a), z 2 (L, a), . . .) is configuration of the yield y, and is a solution to Eq. (TJP satisfying 
the following conditions (see Fig. 

• z n = for M < n < L and z n = 1 for L < n. 

• z L = a. 

• Constraint (TJ|) is relaxed for n = 1, . . . , M — 1. That is, Zi, . . . , zm-i can take an 
arbitrary value. 

Let us supplement this definition. As we have seen in Eq. (fTol) . once Zm+\, zm+2, ■ ■ ■ are all 
fixed, Z\i ■ ■ ■ 1 %m are uniquely determined as 

ZM M\ = ~W. ~ JJ S ( L - M )^ U • • • ' _ Yl ^yS (m _ M) (/ii,...,/i M ). (22) 

m=L+l 

The third item of Definition [3] means that we do not care whether the value thus obtained 
satisfy < zi(L, a), . . . , Zm(L, a) < 1 or not. Using this z(L, a), we now define Z. 

Definition 4 Configuration Z is z(L, a) with the smallest L and the largest a satisfying 
zm{L,o) > 0. In what follows we denote such (L,a) as (Lo,ao)> an d thus Z = z(Lo,ao)- 
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In order for this definition to make sense, we need to guarantee the existence and the 
uniqueness of (L , ao) for an arbitrary choice of A and B. To see this, it is convenient to 
order the pairs (L, a) such that (Li,ai) > (L 2 , 02) if either (i) L\ > L 2 or (ii) L\ = L 2 and 
a\ < a 2 . In terms of this ordering, (Lo, ao) just corresponds to the smallest (L, a) satisfying 
zm(L,ci) > 0. By definition, pairs (L, a) are bounded from below by (M + 1,1), and as 
one can see from (1221) . zm{L,ci) is monotonically increasing with respect to (L,a). Hence 
(L , a ) can obviously be determined uniquely 

We can also show that L is finite. Indeed if zm{L, 1) < for any finite L, we would have 
Xm = liniL^oo Zm(L, 0) < 0. However, this would never happen as we have seen in the first 
paragraph of the proof of Lemma El 




n 



1 2 3 M-\ n = L [ 



FIG. 2: Configuration of Z achieving the minimum yi = Z\ for M odd. It is a solution to Eq. (flj, 
such that (a) Zm = (b) There exists a value L${> M); and Z n = for M < n < Lq, Z n = 1 for 
n > M, and < Zi Q = ao < 1 are satisfied, (c) The constraints < y n < 1 are suppressed for 
Zi, . . . , and they can take an arbitrary value. 

With this Z the following theorem holds. 
Theorem 2 

• For M odd, Z\ is a lower bound of y\ which is consistent with Eq. (Qp. 

• More generally, for any M > 1 and n < M, Z n is a lower (resp. upper) bound of y n 
if M — n is even (resp. odd). 

• If iii, . . . , [Xm < 1; we have < Z n < 1 for all n. That is, Eve can actually achieve 
y n = Z n . Hence Z n is not only a lower (resp. upper) bound, but is also the minimum 
(resp. maximum) of y n for M — n even (resp. odd). 
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The proof will be given in Section IIV CI 



B. An algorithm for finding Z\ 

Next in order to demonstrate that Z\ can be actually obtained within finite steps, we 
present an algorithm for calculating it. First note that for given L and a, by plugging z(L, a) 
in Eq. (JI)) we obtain 



M 



II 



n=l 



with 



/i n fi L 



G(ai; L, a) := e?Q + 0i) - [ # - £ ^ + jj 



n=0 



Then by using Cramer's rule as in Eq. (flOl) . z n (a, L) for 1 < n < M is given as 

//!••• /i?" 1 G{^;L,a) • • • /if 



z n (L,a) 



1 



7? ! 



/£>(//!, . . . (23) 



A'm • • • /^m 1 Gi^M ; a) //J/ 1 • • • /if 
with D([ii, . . . ,/xm) defined in fill I) . Now that we have got rid of all inifinite series, Z can 
be obtained numerically as follows. 
Algorithm 

1. Calculate z M (M + 1, 1) using Eq. (J23]). If z M {M + 1, 1) > 0, let L = M + 1, a = 1 
and go to Step |H 

2. Let L = M + 1. 

3. If Zm(L, 1) < 0, let L = L + 1 and go to Step [31 Otherwise let L = L and find the 
root ao of zm(L , ao) = 0. 

4. Calculate = zi(L ,a ) and stop. 

Note that we need zm(M + 1, 1) and zm{L, 1) in Steps 1 and 3 only in order to check their 
plus or minus sign. Hence when actually running the algorithm, one may omit the division 
by D(ni, . . . , appearing in Eq. (1231) by ordering /ij, for example, as H\ < • ■ ■ < \iu- 

This algorithm stops within finite steps, since L is finite as shown in the previous sub- 
section. Moreover, when /ij < 1, L is bounded from above as L (L — M)\ < Me/qM, as 
shown in Appendix iDl Hence, e.g. for M — 3, r] — 10~ 3 and A = 1, we have Lq < 10. 
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C. Proof of Theorem [2] 

In this subsection we prove Theorem [2j As in the previous section, we first show that Z n 
are a lower or upper bound, and after that we demonstrate that Z n satisfy constraint (j2J) if 
m < 1. 

Lemma 4 For M odd, Z\ is a lower bound on y^. More generally for any M and any 
n < M , if M — n is even (resp. odd), Z n is a lower (resp. upper) bound on y n . 

Proof: Since the proof is essentially the same for all cases, we here consider only the case 
of n = 1 and M odd. During the proof we suppress constraint ([2]) for n = 1, . . . , M — 1 and 
let j/i, . . . , 2/m-i take an arbitrary value. For m > M we still assume < y m < 1. Again, 
by showing that Z\ is the minimum of y\ with these requirements, we prove that it is a 
lower bound under the complete set of constraints (j21). As in the proof of Lemma [2} the 
difference between any solution y — (yi, y 2 . . .) and Z can be expanded as in Eq. (JIB]) . Thus 
the constraint j/m > yields 

oo 

y M = X M + ^ W M Vm > 0, 
m=M+l 

which can be rewritten by using Eq. ( fl4l) as 

1^-2 ^yS (m _ M) (/ii,...,/i M ). (24) 

m=M+l 

Similarly, 2/1 is expressed in terms of 2/M+1, 2/M+2, • ■ • as 

00 

2/1=^1+ > . rSa(m-M,M-l)(A t l; • • • ; ^m) ■ (25) 

Z — ' m! 

m =M+l 

Now Eve's task is to minimize Eq. fl25l) by adjusting 2/m+Ij Um+2, • • • while maintain- 
ing inequality (1241) . Note that both the relations are linear in 2/m+i> Um+2, • • ■■, and 
thus the best configuration that minimizes y± will be determined by their coefficients, 
S(m-M)(^i, ■ ■ ■ ,Hm)/™1 and s a (m-M,M-i)(A t i, • • • ,^M)/ml In fact, as we will show in Ap- 
pendix EH the ratio of these two coefficients 

„ S a ( m _Af,Af-l)(/^l, • • • , (I'M) /nc x 

&m '■= 7 s (2bj 

S( m -Af)U^l) • ' • 5 A^A^J 

increases monotonically with respect to m. Hence the minimum value is achieved by max- 
imizing as many y m 7 s as possible with larger m's in such a way that is consistent with Eq. 
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( |24|) . If the equality can be achieved in ff24l) for some configuration of |/m+i, 2/A/+2, ■ ■ ■, this 
amounts to finding L(> M) such that y m = 1 for m > L, y m = for M < m < L, and 
< Vl < 1 for m = L, and also yu = is satisfied. On the contrary if the equality does not 
hold for any configuration, y\ is minimized when y n — 1 for all n > M. Both these cases 
corresponds to Z of Definition HI Hence Z thus obtained indeed gives the minimum of y\ 
under our temporal constraints on y n . 

Lemma 5 If Hi, ■ ■ ■ , Hm < 1, then < Z n < 1 is satisfied for all n < M. 

Proof: Recall < X n < 1 when /x, < 1 from Lemma [3l Substituting y n = Z n in (|T6|) . we 
find for n < M, 

11 °° Z 

—,Z n = —.X n + ( — 1) n+1 y -^7S Q ( m _M,M-n)(/il, • • • , Hm)- (27) 

m=M+l 

Now since the Schur polynomial s a (m-iW",M-n) an d for m > M being positive, it is clear 
that Z n < 1 for M — n even, and Z n > for M — n odd. 

On the other hand, in order to show Z n > for M — n even and Z n < for M — n odd, 
suppose we had M — 1 constraints, say, of /ii, . . . ,/im-i from the beginning, and consider 
the corresponding X and w( m \ which we will denote in what follows as X and vj( m \ Lemma 
|3] holds in this case as well and we have < X n < 1. By definition, X, as well as Z, are a 
solution to Eq. ([T|) for i — 1, . . . , M — 1. Hence we can apply the same argument as in the 
previous paragraph, using and X this time, and express Z n for n < M — 1 as 



I i 00 i 

—,Z n = —X n + { — l) ' n y 7Sa(m-M-l,M-n-i){fJ>l, ■ ■ ■ > f^M-l)- (28) 

n! n! m! 

m=M 

Again due to the positivity of the Schur polynomials and Z m , this shows Z n > for M — n 
even, and Z n < for M — n odd. This completes the proof. 

V. CONCLUSION 

In this paper, we presented an improved upper and lower bounds X n , Z n for the asymp- 
totic yield y n for the decoy state method using a finite number M of decoy light intensities. 
In particular if all the light intensities /ij are less than or equal to one, X n , Z n are not only 
a lower or upper bound, but in fact are the exact minimum or maximum. 
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Moreover, these X n and Z n can always be obtained by simple numerical calculation by 
using Eq. (jSJ), ffTOj) and by using the algorithm given in Sec. IIVBI 
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APPENDIX A: PROPERTIES OF THE SCHUR POLYNOMIALS 



The Schur polynomial s\ given in Definition [T] can also be expressed as a sum of monomials 



as 



s\(fj,i, . . . , Hm) — ^2 rfxrfi ' ' ' Mm 



(Al) 



T 



where T denotes a semistandard Young tableaux on a Young diagram A, on which number 



i G {1, . . . , M} appears ij times (see, e.g., 



). Semistandard tableaux are those having 



entries which are strictly increasing vertically and weakly increasing horizontally [13j. For 
example, 1 1 2 1 3 1 i s semistandard whereas y 2 I 3 I 4 I is not. The monomial corresponding to 
the former tableau is //f//|^3. For M = 3 and A = (2, 1) = Fp, there are eight semistandard 
tableaux, 



1 


1| 


1 


J] 


2 


3 


2_ 




2_ 


, . . . , 


3_ 





and the Schur polynomial reads 
0(2,1) 1*2, A*3) = 2/ii/i 2 /i 3 + M1M2 + + ^\ + nlfi>2 + nlv>3 + nlni 

= (fJ.1 + A*2)(A*2 +Ai3)(yU3 

which equals the one obtained from Definition [TJ 

If jtii, . . . , hm > 0, the polynomials s\ are always positive since the coefficient of each 
monomial is positive in Eq. (lAljl . In this case there is a simple upper bound 

S A (/il, • • • , Hm) < (/irnax)' 1 ' • S A (1, •••,!) 



with d := ^\ Aj and /i max = maxj /ij. From this and using the formula 

i<j 



s A (l, !,...,!) = J] 



J -I 
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.sec. c 



•g., BQ) we find 

, . , . j "1 — r — >\ o — I — — i 

S A (/Xl, • • • ,HM) < (/imax) [ [ " ' 



i<j 



(A2) 



For m > M, define x^ = (x^, x ] 



APPENDIX B: PROOF OF LEMMA Q] 

as follows. For n — 1, . . . , M, let 



2 > 



H : = (-l) M -" +1 n! • 



Ml ■ ■ • Ml Ml " " " Ml Ml 

/i 2 • • • H2 1 M2 +1 ' ' ' h¥ m™ 



pM ' ' ' Mm Mm 



Mm Mm 



and for n = m, let xffl be 



# := m! 



Mi Mi 



Mm ■ • ■ Mm 



m\D{nx, ■ ■ • ,Mm)- 



All other elements of x^ are zero. Then it is easy to see that for i — 1, 



Eft T H _ V Ml r (m) , Mi_ (m) 
n\ A — 1 nl ml 



,M, 



n=l 



n=l 



Mi • 


•• Mf 


Mr 


Mi ■ 


■■ Mf 


Mr 


Mi • 


•• Mf 


Mr 



,, ,,M ,,m 

Mm ' ' ' Mm Mm 



0. 



(Bl) 



(B2) 



w (m) j n Definition [2] is expressed aS Wn — Xn jxm and thus we have shown that u/ m ) is 
indeed the solution. 

Next we prove that expansions in w^ m ' are possible. For a given Ay, define Ay' := 
Y^m=M+i ^Vm'w ( - m ' 1 and consider v := Ay' — Ay. With Ay and Ay' both being a solution to 
Eq. ( fT3l) . f is also a solution. Then note that by definition v n = for all n > M, and thus 
i>x, . . . vm satisfy 



Mi ••■ Mi 



M 



\ 



A! \ 



0. 



M 



y Mm • • ■ Mm / 



y Mm/ M\ J 
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From this it follows v n = for n < M as well, due to the invertibility of the matrix on the 
left hand side. Hence we have shown Ay' = Ay and that any Ay can be expanded with 

In order to prove the uniqueness of the coefficients of w^ m \ it suffices to show the linear 
independence of w^ m '. This is obvious from the fact that for any n > M, there is only one 
uj( m ) with a nonzero value in the n-th element, i.e., w^ 1 '. 



APPENDIX C: K m IS MONOTONICALLY INCREASING IN m 

Proof: In this proof the variables of the Schur polynomials are always /ii, . . . ,Pm, and we 
will omit them for the sake of brevity. It is immediate from Definition [1] that K m can be 
rewritten as 

M \ 

S(m-M-l) 



K m = [W^i 



S(m-M) 



and by using this we obtain 

K m+1 - K m = (J] J (g(m " M))2 " g(m " M+1)g(m ' M ' 1) - (CI) 



v i=l 



M)°(m-M+1) 

Multiplication of two Schur polynomials s\ and s u is especially simple when the partition v 
(or equivalently A) consists of a single number v — (b). That is, 



f 1 

9 



where the sum is over all partitions p that are obtained from A by adding b boxes, with no 
two in the same raw (see, e.g., Section 2.2 of Ref. jl^]). Hence for A = (a) we have 

min(a,6) 

■5(a) ■ «(6) = s (a+b-c,c), 
c=0 

and from this it follows that the numerator of Eq. flClH is positive; {s( m -M)) 2 — 
S( m -M+i)S(m-M-i) = sr m -M,m-M) > 0. Hence Eq. ( ICljl is also always positive, meaning 
that ii'm is monotonically increasing. 



APPENDIX D: UPPER BOUND ON L 

For /ij < 1, Lq can be bounded from above as follows. If equality cannot hold in (|24j) for 
any configuration of y, we have L = M + 1 (cf. the argument below Eq. ff26l) ). On the 
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contrary, if Z M = zm(L , a ) = for some (L , a ), we have from Eq. (1221) 

< — j- S (m-M)(Ail, • • • , /^m)- (Dl) 



MT _ ^ ml' 

m=Lo 



Next using the upper bound of ( 1A2I) and applying a similar argument as in ( fl~8l) . we find 

X M < y. _l_ (m-1)! 



M! ~ m - ( m - M)\(M - 1)! 
00 1 

= E 



(L + fc)(L -M + A;)!(M-r 

fc! 



fc=0 

00 



1 j_ 



(M - 1)! £-< fc! (L + fc)(L - M + fc)! 



< 



fc=0 

1 



L (L -M)!(M , n 



T)! ^ fc! 



L (L Q -M)!(M-1)! 

As can be seen from ( TT71) Xm is bounded from below as Xm > <Zm, and L is upper bounded 

as 

ML, - M)\ < < . (D2) 
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